Code

ACL updates
[gosa.git] / plugins / admin / ogroups / class_termgroup.inc
index e493341eac788d83999208ccc150951d96b2fa1a..1a5daaef84ff93b08c408ead740cba5bf166995b 100644 (file)
 class termgroup extends plugin
 {
   /* attribute list for save action */
-  var $attributes= array();
-  var $objectclasses= array();
+  var $attributes= array("gotoMode","gotoSyslogServer", "gotoNtpServer");
+  var $objectclasses= array("gotoWorkstationTemplate");
 
   var $members= array();
 
+  var $gotoMode           = "locked";
+  var $gotoSyslogServer   = "";
+  var $gotoNtpServer      = array();
+  var $gotoNtpServers     = array();
+  var $modes              = array();
+  var $inheritTimeServer  = true;
+  var $acl                ;
+  var $is_account                    = true; 
+  var $orig_dn            = "";
+  var $didAction          = FALSE;
+  var $mapActions         = array("reboot"          => "",
+                            "instant_update"  => "softupdate",
+                            "update"          => "sceduledupdate",
+                            "reinstall"       => "install",
+                            "rescan"          => "",
+                            "memcheck"        => "memcheck",
+                            "sysinfo"         => "sysinfo");
+
+
   function termgroup ($config, $dn= NULL)
   {
+    /***************
+      Some  initialisations
+     ***************/
+
     plugin::plugin($config, $dn);
+
     $ldap= $config->get_ldap_link();
 
-    
+    $this->is_account = true;
+    $ui               = get_userinfo();
+    $acl              = get_permissions ($this->dn, $ui->subtreeACL);
+    $this->acl        = get_module_permission($acl, "group", $this->dn);
+
+    $this->modes["active"]= _("Activated");
+    $this->modes["locked"]= _("Locked");
+//    $this->modes["memcheck"]= _("Memory test");
+//    $this->modes["sysinfo"]= _("System analysis");
+
+    $this->orig_dn =   $this->dn;
+
+    /*************** 
+      Get mac addresses from member objects  
+     ***************/
+
     /* We're only interested in the terminal members here, evaluate
        these... */
-    for ($i= 0; $i<$this->attrs['member']['count']; $i++){
-      $member= $this->attrs['member'][$i];
-      $ldap->cat($member);
-      if (preg_match("/success/i", $ldap->error)){
-        $attrs = $ldap->fetch();
-        if (in_array("gotoTerminal", $attrs['objectClass']) ||
-            in_array("gotoWorkstation", $attrs['objectClass'])){
-          $this->members[$attrs['cn'][0]]= $attrs['macAddress'][0];
+    if(isset($this->attrs['member'])){
+      for ($i= 0; $i<$this->attrs['member']['count']; $i++){
+        $member= $this->attrs['member'][$i];
+        $ldap->cat($member, array('objectClass', 'macAddress', 'cn'));
+        if (preg_match("/success/i", $ldap->error)){
+          $attrs = $ldap->fetch();
+          if (in_array("gotoTerminal", $attrs['objectClass']) ||
+              in_array("gotoWorkstation", $attrs['objectClass'])){
+            if (isset($attrs['macAddress'])){
+              $this->members[$attrs['cn'][0]]= $attrs['macAddress'][0];
+            } else {
+              $this->members[$attrs['cn'][0]]= "";
+            }
+          }
         }
       }
     }
 
-    /* Include config object */
-    $this->config= $config;
+    /*************** 
+      Perpare NTP settings 
+     ***************/
+
+    /* Create used ntp server array */
+    $this->gotoNtpServer= array();
+    if(isset($this->attrs['gotoNtpServer'])){
+      $this->inheritTimeServer = false;
+      unset($this->attrs['gotoNtpServer']['count']);
+      foreach($this->attrs['gotoNtpServer'] as $server){
+        $this->gotoNtpServer[$server] = $server;
+      }
+    }
+
+    /* Set inherit checkbox state */
+    if(in_array("default",$this->gotoNtpServer)){
+      $this->inheritTimeServer = true;
+      $this->gotoNtpServer=array();
+    }
+
+    /* Create available ntp options */
+    $this->gotoNtpServers = $this->config->data['SERVERS']['NTP'];
+    foreach($this->gotoNtpServers as $key => $server){
+      if($server == "default"){
+        unset($this->gotoNtpServers[$key]);
+      }
+    }
+
+
+  }
+
+  function check()
+  {
+     /* Call common method to give check the hook */
+    $message= plugin::check();
+
+    if (chkacl($this->acl, "create") != ""){
+      $message[]= _("You have no permissions to create a workstation on this 'Base'.");
+    }
+
+    /* Check for valid ntpServer selection */
+    if((!$this->inheritTimeServer) && (!count($this->gotoNtpServer))){
+      $message[]= _("There must be at least one NTP server selected.");
+    }
+    return($message);
+  }
+
+  function remove_from_parent()
+  {
+    /* Workstation startup is using gotoWorkstationTemplate too,
+        if we remove this oc all other not manged attributes will cause errors */
+    if(isset($this->attrs['gotoKernelParameters'])){
+      $this->objectclasses = array();
+    }
+
+    /* Remove acc */
+    plugin::remove_from_parent();
+    $ldap = $this->config->get_ldap_link();
+    $ldap->cd($this->orig_dn);
+    $ldap->modify($this->attrs);
+    $this->handle_post_events("remove");
   }
 
   function execute()
   {
+    /* Call parent execute */
+    plugin::execute();
+
+
+    /*************** 
+      Handle requested action
+     ***************/
 
     /* Watch for events */
     if (isset($_POST['action'])){
@@ -44,58 +155,215 @@ class termgroup extends plugin
         $names.= "$cn ";
       }
 
-      switch($_POST['saction']){
-        case 'wake':
-          $cmd= $this->search($this->config->data['TABS'], "terminfo", "WAKECMD");
-          if ($cmd == ""){
-            print_red(_("No WAKECMD definition found in your gosa.conf"));
-          } else {
-            exec ($cmd." ".$macaddresses, $dummy, $retval);
-            if ($retval != 0){
-              print_red(sprintf(_("Execution of '%s' failed!"), $cmd));
-            }
-          }
-          break;
+      if (isset($_POST['action'])){
+        $cmd= search_config($this->config->data['TABS'], "workgeneric", "ACTIONCMD");
 
-        case 'reboot':
-          $cmd= $this->search($this->config->data['TABS'], "terminfo", "REBOOTCMD");
-          if ($cmd == ""){
-            print_red(_("No REBOOTCMD definition found in your gosa.conf"));
+        if ($cmd == ""){
+          print_red(_("No ACTIONCMD definition found in your gosa.conf"));
+        } else {
+          exec ($cmd." ".$macaddresses." ".escapeshellarg($_POST['saction']), $dummy, $retval);
+          if ($retval != 0){
+            print_red(sprintf(_("Execution of '%s' failed!"), $cmd));
           } else {
-            exec ($cmd." ".$names, $dummy, $retval);
-            if ($retval != 0){
-              print_red(sprintf(_("Execution of '%s' failed!"), $cmd));
-            }
-          }
-          break;
+            $this->didAction= TRUE;
 
-        case 'halt':
-          $cmd= $this->search($this->config->data['TABS'], "terminfo", "HALTCMD");
-          if ($cmd == ""){
-            print_red(_("No HALTCMD definition found in your gosa.conf"));
-          } else {
-            exec ($cmd." ".$names, $dummy, $retval);
-            if ($retval != 0){
-              print_red(sprintf(_("Execution of '%s' failed!"), $cmd));
+            /* Get dns from member objects. Create ldap object  */
+            $member = $this->parent->by_object['ogroup']->member;
+            $ldap = $this->config->get_ldap_link();
+            $ldap->cd($this->config->current['BASE']);
+
+            /* walk trough members and add FAIstate */ 
+            foreach($member as $dn =>  $object){
+
+              /* Get object */
+              $ldap->cat($dn,array("objectClass"));
+              $res                = $ldap->fetch();
+              $attrs              = array();
+
+              /* Add FAI state */
+              $attrs['FAIstate']  = "";
+              if(isset($this->mapActions[$_POST['saction']])){
+                $attrs['FAIstate'] = $this->mapActions[$_POST ['saction']];
+              }
+
+              /* Fix objectClass index */
+              for($i = 0; $i < $res['objectClass']['count'] ; $i ++){
+                $attrs['objectClass'][] = $res['objectClass'][$i];
+              }
+
+              /* Check if we must add the objectClass */
+              if(($attrs['FAIstate'] != "") && (!in_array("FAIobject",$attrs['objectClass']))){
+                $attrs['objectClass'][] = "FAIobject";
+              }
+
+              if($attrs['FAIstate'] == ""){
+                $attrs['FAIstate'] = array();
+              }
+
+              $ldap->cd($dn);
+              $ldap->modify($attrs);
+              show_ldap_error($ldap->get_error(), sprintf(_("Saving of system workstation/generic (FAIstate) with dn '%s' failed."),$dn));
             }
+            $this->didAction= TRUE;
           }
-          break;
+        }
+      }
+    }
+
+
+    /*************** 
+      Add remove NTP server
+     ***************/
+
+    /* Add new ntp Server to our list */
+    if((isset($_POST['addNtpServer'])) && (isset($_POST['gotoNtpServers']))){
+      $this->gotoNtpServer[$_POST['gotoNtpServers']] = $_POST['gotoNtpServers'];
+    }
+
+    /* Delete selected NtpServer for list of used servers  */
+    if((isset($_POST['delNtpServer'])) && (isset($_POST['gotoNtpServerSelected']))){
+      foreach($_POST['gotoNtpServerSelected'] as $name){
+        unset($this->gotoNtpServer[$name]);
       }
     }
 
-    
+
+    /*************** 
+      Prepare smarty 
+     ***************/
+
     /* Set government mode */
     $smarty= get_smarty();
 
-    $smarty->assign("actions", array("wake" => _("Wake up"), "halt" => _("Switch off"), "reboot" => _("Reboot")));
+    foreach($this->attributes as $attr){
+      $smarty->assign($attr,      $this->$attr);
+      $smarty->assign($attr."ACL",chkacl($this->acl,$this->$attr));
+    }
+
+    /* Variables */
+    foreach(array("gotoMode","gotoNtpServer") as $val){
+      $smarty->assign($val."_select", $this->$val);
+      $smarty->assign($val."ACL", chkacl($this->acl, $val));
+    }
+
+    $smarty->assign("actions", array("halt" => _("Switch off"), "reboot" => _("Reboot"),
+          "instant_update" => _("Instant update"),
+          "update" => _("Scheduled update"),
+          "reinstall" => _("Reinstall"),
+          "rescan" => _("Rescan hardware"),
+          "memcheck" => _("Memory test"),
+          "sysinfo"  => _("System analysis")));
+
+    $smarty->assign("inheritTimeServer",$this->inheritTimeServer);
+    $smarty->assign("modes", $this->modes);
+    $smarty->assign("actionACL", chkacl($this->acl, 'action'));
+
+    $tmp = array();
+    foreach($this->gotoNtpServers as $server){
+      if(!in_array($server,$this->gotoNtpServer)){
+        $tmp[$server] = $server;
+      }
+    }
+
+    $smarty->assign("gotoNtpServers",$tmp); 
+    $smarty->assign("syslogservers", $this->config->data['SERVERS']['SYSLOG']); 
+    $smarty->assign("gotoSyslogServer_select", $this->gotoSyslogServer); 
 
     /* Show main page */
     return ($smarty->fetch (get_template_path('termgroup.tpl', TRUE)));
   }
 
-}
+  function save_object()
+  {
+    plugin::save_object();  
+    /* Set inherit mode */
+    if(isset($_POST['workgeneric_posted'])){
+      if(isset($_POST["inheritTimeServer"])){
+        $this->inheritTimeServer = true;
+      }else{
+        $this->inheritTimeServer = false;
+      }
+    }
+  }
 
+  /* Save to LDAP */
+  function save()
+  {
+    plugin::save();
+
+    /***************
+      Prepare special vars 
+     ***************/
+
+    /* Unset some special vars ... */
+    foreach (array("gotoSyslogServer") as $val){
+      if ($this->attrs[$val] == "default"){
+        $this->attrs[$val]= array();
+      }
+    }
+
+    /* Update ntp server settings */
+    if($this->inheritTimeServer){
+      $this->attrs['gotoNtpServer'] = "default";
+    }else{
+      /* Set ntpServers */
+      $this->attrs['gotoNtpServer'] = array();
+      foreach($this->gotoNtpServer as $server){
+        $this->attrs['gotoNtpServer'][] = $server;
+      }
+    }
+
+
+    /***************
+      Write to ldap 
+     ***************/
+
+    /* Write back to ldap */
+    $ldap= $this->config->get_ldap_link();
+    if ($this->orig_dn == 'new'){
+      $ldap->cd($this->config->current['BASE']);
+      $ldap->create_missing_trees(preg_replace('/^[^,]+,/', '', $this->dn));
+      $ldap->cd($this->dn);
+      $ldap->add($this->attrs);
+      if(!$this->didAction){
+        $this->handle_post_events("add");
+      }
+    } else {
+      if ($this->orig_dn != $this->dn){
+        $this->move($this->orig_dn, $this->dn);
+      }
+      $ldap->cd($this->dn);
+      $this->cleanup();
+      $ldap->modify ($this->attrs);
+
+      if(!$this->didAction){
+        $this->handle_post_events("modify");
+      }
+    }
+    show_ldap_error($ldap->get_error(), sprintf(_("Removing of object group/workstation with dn '%s' failed."),$this->dn));
+  }
+  
+  function plInfo()
+  {
+    return (array(
+          "plShortName"   => _("System"),
+          "plDescription" => _("System group"),
+          "plSelfModify"  => FALSE,
+          "plDepends"     => array(),
+          "plPriority"    => 0,
+          "plSection"     => array("administration"),
+          "plCategory"    => array("ogroups"),
+          "plProvidedAcls"=> array(
+            "gotoMode"          => _("Mode"),     
+            "gotoSyslogServer"  => _("Syslog server"), 
+            "FAIstate"          => _("Action flag"), 
+            "gotoNtpServer"     => _("Ntp server"))
+          ));
+  }
+
+
+
+}
 
 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
 ?>